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VIDEO BIT SCRAMBLING 

Background of the Invention 

Technical Field of the Invention: The invention relates to techniques for scrambling bits 
of digital video signals and for descrambling the bits in a remote computer if certain conditions 
are met. 

5 Background Art: With the advent of digital media and the increasingly widespread use of 

the Internet, cable, and satellite transmissions, the amount of video content creation is 
dramatically increasing. Content may be created for commercial purposes such as entertainment 
and advertising, or for more personal interests such as home videos and information for the 
hobbyist. 

The term "streaming video 11 is often used to refer to point to point transmission of video, 
21 as opposed to broadcast video, wherein one computer sends the same signal to more than one 

receiving computer. Streaming video is often transmitted in real time. The term "video on 
y3 demand" refers to the ability to request specific video content among various choices and have it 

provided as in streaming video. 

13L For many content providers, there is a concern that sensitive or economically valuable 

O 

W content be provided to only specific individuals. Passwords and encryption have been used in an 

n § 

j* attempt to assure this. For example, an Internet provider may require a password before content 
"~ is sent and/or the Internet provider may encrypt the content and expect the receiver to decrypt the 
content. 

20 There are various formats for digital video. Common formats for digital video include 

MPEG (Moving Picture Experts Group) formats. Current and proposed MPEG formats include 
MPEG-1 ("Coding of Moving Pictures and Associated Audio for Digital Storage Media at up to 
about 1.5 MBits/s," International Standard IS-11172, completed in 10.92), MPEG-2 ("Generic 
Coding of Moving Pictures and Associated Audio" Committee Draft CD 13818 as found in 

25 documents MPEG93/ N601, N602, N603 (1 1.93)); and MPEG-4 ("Very Low Bitrate Audio- 
Visual Coding" Status: call for Proposals 1 1.94, Working Draft in 1 1.96). There are different 
versions of MPEG-1 and MPEG-2. 
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Summary 

In some embodiments, the invention includes a method to bit scramble a digital video 
signal. The method includes receiving blocks of the digital video signal and scrambling the 
blocks of the digital video signal responsive to a remote computer number. The remote computer 
number may be a processor number of a remote computer that may descramble the bit scrambled 
video signal. 

In other embodiments, the invention includes a method to descramble a bit scrambled 
video signal in a computer. The method includes receiving blocks of the bit scrambled video 
signal and descrambling the blocks of the bit scrambled video signal responsive to a remote 
computer number of the computer in which the descrambling is occurring. 

Additional embodiments are described and claimed. 

Brief Description of the Drawings 

The invention will be understood more fully from the detailed description given below 
and from the accompanying drawings of embodiments of the invention which, however, should 
not be taken to limit the invention to the specific embodiments described, but are for explanation 
and understanding only. 

FIG. 1 is a block diagram representation of a system including a scrambling computer, 
link, and receiving computer according to some embodiments of the invention. 

FIG. 2 is a block diagram representation of the scrambling computer of FIG. 1 according 
to some embodiments of the invention. 

FIG. 3 is a block diagram representation of a descrambling computer, which is an 
example of the remote receiving computer of FIG. 1 according to some embodiments of the 
invention. 

FIG. 4 is a block diagram representation of a system including a scrambling computer 
having an authentication mechanism, link, and receiving computer, according to some 
embodiments of the invention. 

FIG. 5 is a block diagram representation of the processing mechanisms of FIGS. 2 and 3 
according to some embodiments of the invention. 
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FIG. 6 is a block diagram representation of the processing mechanisms of FIGS. 2 and 3 
according to some embodiments of the invention. 

FIG. 7 illustrated scrambling using exclusive-OR (XOR) operations according to some 
embodiments of the invention. 
5 FIG. 8 illustrated descrambling using XOR operations according to some embodiments of 

the invention. 

FIG. 9 illustrated scrambling using XOR operations according to some embodiments of 
the invention. 

FIG. 10 illustrated descrambling using XOR operations according to some embodiments 
10 of the invention. 

FIG. 1 1 illustrated scrambling using XOR operations according to some embodiments of 
the invention. 

FIG. 12 illustrated descrambling using XOR operations according to some embodiments 
fy of the invention. 

15|| FIG. 13 is a block diagram representation of certain components of the computers of 

^ FIG. 1 according to some embodiments of the invention. 

P Detailed Description 

Lil 

a* The invention concerns techniques to scramble bits of digital video signals and 

20p descramble the bits in a remote computer if certain conditions are met. In some embodiments, 
y9 the bits are scrambled block by block and later descrambled block by block allowing high speed 
on the fly scrambling and descrambling. The invention may be used for streaming video, 
broadcast video, and non-real time encryption and decryption of video signals, whether point to 
point or broadcast. The invention may be used in connection with video on demand. As used 
25 herein, a block is not restricted to any particular portion of a digital video signal and may be a 
fixed bit-length signal (e.g., it is not necessarily an MPEG block or MPEG macroblock and 
should not be confused with these MPEG terms). Audio that may accompany the video may also 
be scrambled and descrambled. 
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Reference in the specification to "some embodiments" or "other embodiments" means 
that a particular feature, structure, or characteristic described in connection with the 
embodiments is included in at least some embodiments, but not necessarily all embodiments, of 
the invention. The various appearances of the term "some embodiments" in the description are 
not necessarily all referring to the same embodiments. 

Referring to FIG. 1, a system 10 includes a bit scrambling computer 14 that provides a bit 
scrambled video signal through a link 20 to a remote receiving computer 18. Receiving 
computer 18 drives a display 24, which may be physically packaged or separate from receiving 
computer 18. A key, described below, is used to scramble the video. If receiving computer 18 
uses the same key and includes proper hardware and/or software, the scrambled video is 
descrambled by receiving computer 18 for display on display 24. (In the described 
embodiments, the scrambling and descrambling process is lossless, but in other embodiments it 
could be lossy.) If receiving computer 18 does not have the correct key and/or does not include 
proper hardware and/or software, either nothing or unrecognizable video is displayed on display 
24 in response to the scrambled video. A reason why nothing might be displayed is that many 
media players skip over bits that do not conform to a particular format (e.g., one of the MPEG 
formats). Link 20 represents any of various links including the Internet, an intranet, a local area 
network, cable, satellite, or other networks, or a combination of them. 

In some embodiments, the key includes more than one component. In some 
embodiments, the key includes a remote computer number. The remote computer number is a 
number associated with remote receiving computer 18. Examples of remote computer number 
include a processor number (PN) associated with a particular processor, a chipset number 
associated with a particular chipset, and a software number that is associated with particular 
software, such as an operating system, or a combination of them. The remote computer number 
can be obtained in various ways (e.g., through a secure socket layer applet sent to the remote 
receiving computer). The user of the remote receiving computer could request software that is 
downloaded from scrambling computer 14 or elsewhere. Upon receiving the correct password, 
the software interfaces with scrambling computer 14 to provide the remote computer number of 
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the remote receiving computer. Using the remote computer number as a component in the key 
adds an extra level of security. 

As used herein, the term computer is intended to be broadly interpreted to include a 
variety of systems and devices including general purpose computers such as personal computers, 
5 portable computers, and mainframe computers, and specific purpose computers, such as set top 
boxes, digital versatile disc (DVD) players, and the like. 

Referring to FIG. 2, scrambling computer 30 is an example of scrambling computer 14. 
Raw video is received by a video encoder 32 to produce a compressed digital video signal in a 
particular format (e.g., one of the MPEG formats). The digital video signal is received by a 
10 scrambling mechanism 34. (As used herein, the term "mechanism" refers to a structure that may 
include dedicated hardware, or software or firmware executed by a processor, such as a 
microprocessor or digital signal processor, or a combination of them.) Alternatively, the video 
O signal may be received by scrambling computer 30 in an already compressed format so that 
fy video encoder 32 might not be used in some cases. 

15^. Processing mechanism 38 receives a key and provides a processed key (PK) to 

^ scrambling mechanism 34. Scrambling mechanism 34 performs a bit scrambling technique to 
H produce a bit scrambled video signal (SV). Examples of bit scrambling techniques are described 
q below. The bit scrambled video signal is a function of at least the video signal and the processed 
]t\ key. In some embodiments, a video position signal is used in scrambling mechanism 34 (e.g., 
20p see FIGS. 1 1 and 12). The bit scrambled video signal may be received by a transmitting 
J=i mechanism 36 for transmitting to remote receiving computer 18. The bit scrambling video signal 
may be held in a buffer or other memory and perhaps otherwise processed in scrambling 
computer 30 and/or link 20. 

Referring to FIG. 3, descrambling computer 40 is an example of a remote receiving 
25 computer 18. The bit scrambled video signal from the scrambling computer 30 is received by 

receiving mechanism 42 through link 20. Note that if the bit scrambled video signal is further 
altered through processing in scrambling computer 30 or link 20, that altering will be undone at 
some point and the mechanism for the altering and undoing of the altering is not discussed 
herein. 
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Descrambling mechanism 44 receives the bit scrambled video signal from receiving 
mechanism 42. Processing mechanism 48 receives a key and provides a processed key (PK) to 
scrambling mechanism 44. In some embodiments, for there to be descrambling, processing 
mechanism 48 is identical to processing mechanism 38 and the key and processed key in 
5 descrambling computer 40 are identical to the key and processed key in scrambling computer 30. 
That is, in these embodiments, if the key is different in the receiving computer than it was in the 
scrambling computer, the bit scrambled video signal will not be descrambled. If the conditions 
are met, descrambling mechanism 44 undoes the bit scrambling to produce a descrambled digital 
video signal (DV). A video decoder mechanism 46 may decompress the descrambled video for 
10 displaying on display 24. 

Note that it is not necessary that scrambling mechanism 34 and descrambling mechanism 
44 act on compressed video. However, the speed at which the video signal may be transferred 
O over link 20 will be increased if the video signal is compressed. 

fy In some embodiments, the scrambling computer includes an authentication mechanism to 

15 fj determine whether the remote receiving computer has the correct key or portion of the correct 
key. For example, referring to FIG. 4, a scrambling computer 52 (which is an example of 
scrambling computer 14) includes an authentication mechanism 54 which may be used to 
p determine whether remote receiving computer 18 has the correct key (in some embodiments) or a 
!~ portion of the correct key (in other embodiments). For example, authentication unit 54 may 
2Gp check to determine whether remote receiving computer 18 has the proper remote computer 
if] number. In that example, if remote receiving computer 1 8 does not have the proper remote 

computer number, scrambling computer 52 would not send the video signal to remote receiving 
computer 18 or discontinue sending the scrambled signal if it has already started. This mode of 
protection ensures that the playback occurs only during a network connection and to the right 
25 remote receiving computer. The check for remote computer number may be made periodically. 

In different embodiments, the key includes different components. Also, in different 
embodiments, the details of processing mechanisms 38 and 48 may be different. For example, 
referring to FIG. 5, a processing mechanism 60 is an example of processing mechanism 38 
and/or 48. The key includes a password and a remote computer number, which are hashed by 
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hash mechanisms 62 and 64. The hashed password and remote computer number are 
concatenated by concatenation mechanism 66 to seed a pseudorandom number generator 
(PRNG) 68. PRNG creates the processed key PK. Alternatively, the password and remote 
computer number could be concatenated first (which may include some truncation) and then 
5 hashed. Once a PRNG is seeded, it can continue to provide pseudo random numbers without 
being reseeded. In some embodiments, it there is not both hashes and a PRNG in the same 
processing mechanism. 

As another example, referring to FIG. 6, a processing mechanism 80 is another example 
of processing mechanism 38 and/or 48. A position determining mechanism 82 receives the 
10 digital video signal (V) and produces a video position number signal. The video position number 
signal is indicative of the block being scrambled or descrambled. For example, the video 
position number could be a number representing the block or the first byte in the block. The key 
~ includes a password, a remote computer number, and the video position number signal, which 
FU are concatenated in concatenation mechanism 84 and hashed in hash mechanism 86, which 
lSjf produces PK. Processing mechanism 80 could have included a PRNG. Similarly, processing 
?f mechanism 60 may alternatively not include PRNG 68. Processing mechanisms 38 and 48 may 
H include other details. Processing mechanisms 38 and 48 might merely concatenate components 
p or otherwise process the key to produce the PK. The PK may be held in a buffer (not illustrated) 

I : ? 

5l and supplied to scrambling or descrambling mechanisms 34 or 44 from the buffer. 
2oF In some embodiments, scrambling and descrambling mechanisms 34 and 44 perform at 

*Q least one level of XOR operations, although they may also perform other functions. In different 
embodiments, the scrambling and descrambling procedures are different. For example, FIGS. 7 
and 8 illustrate a first scrambling and descrambling procedure; FIGS. 9 and 10 illustrate a second 
scrambling and descrambling procedure; and FIGS. 1 1 and 12 illustrate a third scrambling and 
25 descrambling procedure. 

Referring to FIG. 7, V0, VI, and V2 are three successive blocks in the digital video signal 
(V) received by scrambling mechanism 34. SV0, SV1, and SV2 are three successive blocks in 
the bit scrambled video signal produced by scrambling mechanism 34. As noted, a block is not 
restricted to any particular portion of the digital video signal and may be a fixed bit-length signal 
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(e.g., 32 bits per block). An XOR operation is performed with a block VO and the processed key 
(PK) to produce a block SVO of the scrambled digital video signal (SV). As is well known, in an 
XOR operation, 0 XOR 0 = 0, 0 XOR 1 = 1,1 XOR 0=1,1 XOR 1=0. (In some embodiments, 
the first bit of the VO is XORed with the first bit of PK, second bit of VO is XORed with the 
second bit of PK, etc., although a different order could be used as long as it is also followed in 
descrambling mechanism 44.) In the illustrated embodiment, an XOR operation is also 
performed between VI and VO to produce SV1 of the bit scrambled video signal. An XOR 
operation is also performed between V2 and VI to produce SV2. The XORing of VO and PK 
and the XORing of VI and VO may be performed sequentially, concurrently, or be partially 
overlapping. 

Referring to FIG. 8, descrambling mechanism 44 undoes the scrambling that produced 
scrambled blocks SVO, SV1, and SV2 to produce descrambled video signal blocks DVO, DV1, 
and DV2, which may be identical to VO, VI, and V2. In XOR mechanism 68, SVO is XORed 
with PK to produce DVO, SV1 is XORed with DVO to produce DV1, and SV2 is XORed with 
DV1 to produced DV2, etc. 

In other embodiments, as illustrated in FIG. 9, scrambling mechanism 34 performs 
similar to that in FIG. 7 except that VO, VI, and V2 are each XORed with PK to produced SVO, 
SV1, and SV2, respectively. Likewise as illustrated in FIG. 10, descrambling mechanism 44 
performs similar to that of FIG. 8, except that SVO, SV1, and SV2 are XORed with PK to 
produced DVO, DV1, and DV2, respectively. Note that PK may change over time (e.g., see 
FIG. 6). 

In the examples of FIGS. 7-10, there is only one level of XOR operations. In other 
embodiments, there may be more than one level. In the example of FIG. 11, scrambling 
mechanism 34 first performs V0 XOR PK (having a result called result Rl) and performs XOR 
with Rl and a byte number X (BN) of the digital video signal (V) to produce SV1, where SV1 = 
Rl XOR BN. For example, the byte number may indicate a number for the first byte of the 
block being XORed. Alternatively, the block number could be used as an XOR operand. 
Position determining mechanism 82 may be used to generate the video positioning number (e.g., 
byte number or block number.) Likewise, VI is XORed with PK and the result is XORed with 
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Byte X + IN; and V2 is XORed with PK and the result is XORed with Byte X + 2N, etc., where 
N may be 1 or some other value. Note that the particular byte number does not matter as long as 
the same is used in descrambling. FIG. 12 illustrates possible operations for descrambling 
mechanism 44. For example, SV1 is XORed with PK to produce result Rl, then Rl is XORed 
with Byte X to produce descrambled video signal DVO, which may be identical to VO. Likewise, 
DV1 and DV2 are produced through XORing Rl and BN. 

Various other XORing procedures could be used, including different orders of XORs. 
Further, although in FIGS. 1 1 and 12, the PK operand is used in each XORing in the first level of 
XORing, the PK could merely be an initialization vector and each following XORing could use 
the previous D or SV signal has in the example of FIGS. 7 and 8. 

FIG. 13 illustrates some components of a computer 100, which is an example of 
computers 14 and 18 in FIG. 1, although they are not so limited. Computer 100 includes a 
processor 102 having on die memory 104, and off die memory 106. Memory 106 represents 
various types of memory including RAM and a hard drive. A disc 108 may contain software to 
perform the techniques described herein. Each of these memories and the disc include machine 
readable medium to hold the instructions to be executed. 

In the systems of FIGS. 1-3, standard off-the-shelf video encoders and decoders may be 
used. There encoders and decoders may support non-standard input/output (I/O). Examples of 
standard off-the-shelf decoders include video decoders that conform to the Microsoft® MCI 
(Media Control Interfaces) interfaces. Through the MCI interfaces, the I/O routines for reading a 
block of data and seeking an arbitrary position in a video can be replaced by user-supplied ones. 
In this invention, the user-supplied routines for performing I/O may also be used to perform the 
bit descrambling process. As data bits are read in the memory of a computer system, the bits are 
descrambled on the fly. As a result, the unprotected original version of the digital video will not 
be sitting on the file system. Instead, only a small chunk of the original video data will be in 
memory at a time. This makes complete recovery difficult, if not impossible. Another example 
of an off-the-shelf decoder is one that conforms to the Microsoft® DirectShow™ interfaces and 
the comments made with respect to the MCI apply. 
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These two off-the-shelf video decoder solutions allows the scrambling and descrambling 
of video compressed with any compression methods supported by the decoder. Through using 
either MCI or DirectShow™, some embodiments of the invention may be used in connection 
with most video compression methods, including Microsoft® AVI, MPEG, Apple® 
QuickTime™ and DV (Sony® digital video format). 

For a custom developed video decoding system, the descrambling mechanism can be 
integrated with the I/O process of the system. During the read process, in some embodiments, a 
block of data will be read at a time. Each block of data will be first processed by the 
descrambling mechanism, before that block is being processed by the decoding unit. 

In some embodiments, every block is scrambled. In other embodiments, not every block 
is scrambled. For example, every fourth block might be scrambled. Header information might 
not be scrambled. 

There are several possibilities as to how the fact that a block of video has been scrambled 
can be transmitted or conveyed to the media player. The following are some ways. 

1 . Inserted into a header information with the protected video . For MPEG video, the 
header can be the user data section of the bitstream. The user data section is used specifically for 
storing any user information and will be ignored by a standard MPEG decoder. A modified 
MPEG decoder will read the user data section to extract the segment information. In a streaming 
environment where random access is supported (i.e., video need not be transmitted in full; rather 
only a small segment of video might be transmitted at a time), this segment information may be 
inserted with the user data section of the segment that is being streamed. 

2. Embedded into the video frames using invisible watermarking techniques . 
Invisible watermarking techniques are methods for inserting information into media data without 
creating visible distortion. The media player first extracts the watermark and thus the 
information regarding protected segment, before actual playback of the video. In a streaming 
environment where random access is supported, the segment information may be inserted using 
invisible watermarking techniques to the start of the segment that is being streamed (instead of 
placing it at the start of the video). In such a case, the video server may be capable of live 
insertion of the watermark as the video is being streamed to the client. 
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3. Sending the information as separate data . This case is useful for online purchase 
of movie in which unprotected video segments are used as teasers to entice the user to pay for the 
full movie. Without the protected segment information, the media player cannot play back the 
protected segment in its original forms. In this example, the segment information may be sent 
5 only when payment is made and authorization is given. 

Additional Information and Embodiments 

It is simplest to make scrambling and descrambling mechanisms 34 and 44 the same. 
However, that is not required. It is possible to construct a system wherein processing 
mechanisms 38 and 48 are designed to be different but still give the same PK because different 
10 keys are intentionally entered. It is also possible to construct a system wherein the scrambling 
and descrambling mechanism are different but the descrambling mechanism correctly 
descrambles, because for example, a different PK is used. 
*p[ There could be multiple levels of scrambling in series using different keys components. 

Ty The key may include a component representing information from previous blocks. 

lSfj The term "responsive" and related terms mean that one signal or event is influenced to 

Ms some extent by another signal or event, but not necessarily completely or directly. If the 
mfA specification states a component, event, or characteristic "may", "might" or "could" be included, 
O that particular component, event, or characteristic is not required to be included. 

y 

pj Those skilled in the art having the benefit of this disclosure will appreciate that many 

20tr other variations from the foregoing description and drawings may be made within the scope of 

yjj 

J3 the present invention. Accordingly, it is the following claims including any amendments thereto 
that define the scope of the invention. 
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